1. Who operates Pawpal

Operator/controller: JoCoding, Inc.

Privacy and support contact: mu07010@jocoding.net

Business form: Delaware corporation · Registered address: 1111B S Governors Ave, STE 80543, Dover, DE 19904, United States · Telephone: +1 (231) 450-5622 · Website: jocoding.io

Privacy requests are handled through the email address above. We may ask for information needed to verify that a request comes from the account holder.

2. What Pawpal does

Pawpal connects two people — including couples, long-distance partners, best friends, and family — with one shared virtual dog. A person writes text or a drawing, the dog carries the letter to the other person, and the recipient can read it in the app. The Home Screen widget and iOS Live Activity show the delivery state; they do not show the letter itself.

3. Information used by the app

4. Information we do not intentionally request

Pawpal has no advertising SDK, subscription, external payment flow, public social feed, or behavioral-advertising profile. The app has no camera, photo-library, location, contacts, or microphone permission API. It does not intentionally request a name, email address, phone number, physical address, precise location, contacts, or photo library. Optional breed unlocks are bought through Apple's In-App Purchase; Pawpal and its providers never receive your card or other payment-method details. Free-form letters can still contain personal or sensitive information if a user chooses to write it.

5. Providers and international transfers

Pawpal is operated from Korea but uses providers in more than one country. The current release configuration and source identify these paths:

For users outside Korea, app data therefore moves to and is processed in the configured provider regions. Product analytics is sent to the United States endpoint above.

6. Access controls and operator access

Server-side identity checks prevent ordinary users from reading another account's connection or letters: every request is authorised against the calling account before any record is returned. Restricted server-side paths process the data needed for delivery, account deletion, and report handling, and operator access to report snapshots exists for safety operations.

7. Retention, deletion, and safety snapshots

• Connection ended: disconnecting or blocking deletes that connection's letters, pet, and couple row. Blocking also prevents reconnection through the same relationship.
• Account deletion: Settings calls the account deletion path, which removes the account's devices, preferences, invite attempts, blocks, couple data, sent letters, reports filed by that account, breed-unlock credits and purchase records, and then the authentication account. If the account was signed in with Apple, the server also asks Apple to revoke Pawpal's Sign in with Apple authorization, so Pawpal no longer appears as connected to your Apple Account. Unlocks bought for the deleted account cannot be moved to a new account. Deletion cannot be undone.
• Ordinary letters: reading a letter sets its read state but does not automatically purge its text or drawing. The original remains in the database until the connection is ended/blocked or the applicable account-deletion path removes it; no separate read-letter time-to-live is configured.
• Report snapshots: the fixed report reason inappropriate and body/drawing snapshot are retained separately from the deleted original letter for safety review. A report filed by another account may therefore outlive the reported author's deletion.
• Analytics and diagnostics: after a successful account deletion, the app clears pending Widget events from the App Group queue and resets the local PostHog identity/session. This does not automatically erase events already delivered to PostHog; email the privacy contact above to request provider-side access or deletion.
• Local device data: account/session and widget cache are cleared on the relevant in-app actions, subject to the operating system and the separate Apple account link. Device backups and provider logs can have their own retention rules.

8. Push, widgets, and Live Activities

The app does not request standard notification authorization. When the system has a Pawpal widget token or Live Activity start token, APNs carries a content-change or activity-start signal to wake the relevant iOS surface. Letter text is not put in that payload. Users control whether a widget is installed and whether Live Activities are allowed in iOS settings; network availability and iOS refresh rules can affect timing.

9. Your rights and how to use them

You can use Settings to disconnect, block, and delete. For access, correction, deletion, restriction, portability where applicable, or a privacy question, email mu07010@jocoding.net. We may need to verify that the request is from the account holder. Korean users may also contact the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr) or the Korea Internet & Security Agency privacy infringement report center (118, privacy.kisa.or.kr).

Pawpal does not make an automated decision that determines a user's legal rights, eligibility, price, or access using profiling. Product analytics and the automatic report/block action are not an automated eligibility decision.

10. Age policy

Pawpal is intended for people 16 or older worldwide. It is not directed to children under 16, and the app does not verify age at sign-up. If you believe a person under 16 provided information, contact us; we will review the request and delete information where required.

11. Security and changes

App-to-server traffic uses HTTPS/TLS. Database policies and server-side checks protect account boundaries. No system is perfectly secure. We will post material changes here; Korean consumer-facing changes will be announced at least 7 days before taking effect and materially unfavorable changes at least 30 days before where required. A new consent may be required for a new processing purpose.